last executing test programs: 492.589825ms ago: executing program 2 (id=11063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7}}]}}}]}, 0x60}}, 0x0) 435.1365ms ago: executing program 2 (id=11066): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) 430.171031ms ago: executing program 0 (id=11067): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="47ad3d32265807006bdb74ecb9f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f85090084665ea561e52d97fbe9e839a0", 0x34}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 370.012204ms ago: executing program 2 (id=11069): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r0, 0x2}, 0x20) 369.306172ms ago: executing program 0 (id=11070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 363.015175ms ago: executing program 1 (id=11072): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0xd00, 0x4, 0x10041, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x5, 0x100ff, 0x2, 0x1, 0x1, 0x2, 0x9, 0x9, 0xbc76146, 0x9, 0x42, 0x40000003, 0xfff, 0x8, 0x5, 0x3, 0x800b, 0x48, 0x5, 0x6, 0xd, 0x1, 0xffffff5c]}) 260.967482ms ago: executing program 0 (id=11073): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 260.710826ms ago: executing program 2 (id=11074): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 260.282902ms ago: executing program 1 (id=11076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, 0x0) 260.179376ms ago: executing program 0 (id=11077): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, 0x0}) 260.010647ms ago: executing program 2 (id=11078): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 259.935525ms ago: executing program 3 (id=11079): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) close(0x3) 155.779353ms ago: executing program 2 (id=11080): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 155.60212ms ago: executing program 0 (id=11081): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x0, 0x7}) 155.545073ms ago: executing program 3 (id=11082): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 155.490256ms ago: executing program 1 (id=11083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0x17, 0x0, @l2={'eth', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) 146.256537ms ago: executing program 3 (id=11084): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) 87.137461ms ago: executing program 1 (id=11085): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000180)={0x20, r1, 0x1, 0x0, &(0x7f0000000600)=[{}]}) 86.77932ms ago: executing program 0 (id=11086): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x8014) listen(r0, 0xfffffffd) 86.676622ms ago: executing program 1 (id=11087): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0884123, &(0x7f0000000080)) 80.503924ms ago: executing program 3 (id=11088): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x1000000003, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.065143ms ago: executing program 3 (id=11089): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfb) 1.91577ms ago: executing program 1 (id=11090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4818}, 0xc080) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 0s ago: executing program 3 (id=11091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xdfd2c0ff079d97f5}, 0x14}}, 0x0) 0s ago: executing program 1 (id=11093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x2, 0x0, 0x6, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffb, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): code=0x50000 [ 145.471482][ T40] audit: type=1326 audit(2000524875.003:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz.3.6653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 145.480828][ T40] audit: type=1326 audit(2000524875.003:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz.3.6653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 145.490027][ T40] audit: type=1326 audit(2000524875.003:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz.3.6653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 145.498918][ T40] audit: type=1326 audit(2000524875.003:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz.3.6653" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 145.554062][T19482] bond0 (unregistering): (slave ): Releasing backup interface [ 145.579807][T19482] : left allmulticast mode [ 145.583042][T19486] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 145.587415][T19482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.613669][ T62] Bluetooth: hci3: command 0x0401 tx timeout [ 145.633369][T19482] bond_slave_1: left allmulticast mode [ 145.637699][T19482] bond0 (unregistering): Released all slaves [ 145.690710][T19496] netlink: 'syz.0.6698': attribute type 20 has an invalid length. [ 145.796001][T19508] __nla_validate_parse: 13 callbacks suppressed [ 145.796016][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6705'. [ 146.099142][T19539] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 146.287850][T19567] i2c i2c-1: Invalid block write size 34 [ 146.383270][T19574] bond0: Error: Cannot enslave bond to itself. [ 146.624759][T19611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6756'. [ 146.798926][T19627] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 146.887362][T19641] dlm: no locking on control device [ 146.984627][ T6029] Bluetooth: hci0: unexpected cc 0x2023 length: 4 < 5 [ 146.986841][ T6029] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 147.168109][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6789'. [ 147.178581][T19680] validate_nla: 2 callbacks suppressed [ 147.178593][T19680] netlink: 'syz.1.6790': attribute type 1 has an invalid length. [ 147.182966][T19680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6790'. [ 147.289551][T19690] comedi comedi0: aio_aio12_8: I/O base address or length out of range [ 147.532628][T19713] bridge5: entered promiscuous mode [ 147.625274][T19725] netlink: 'syz.1.6811': attribute type 30 has an invalid length. [ 147.636704][T19727] netlink: del zone limit has 4 unknown bytes [ 147.786348][T19742] xt_cgroup: xt_cgroup: no path or classid specified [ 147.963934][T19756] xt_CT: No such helper "snmp_trap" [ 148.029114][T19769] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 148.247675][T19795] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 148.622107][T19883] random: crng reseeded on system resumption [ 148.643157][T19889] netlink: 'syz.0.6892': attribute type 10 has an invalid length. [ 148.768625][T19920] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6907'. [ 148.797482][T19926] netlink: 'syz.1.6911': attribute type 1 has an invalid length. [ 148.800029][T19926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6911'. [ 148.988042][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6934'. [ 149.023187][T19989] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 149.082907][T20002] netlink: 'syz.0.6945': attribute type 1 has an invalid length. [ 149.085821][T20002] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.6945'. [ 149.130845][T20010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.179847][T20018] netlink: 488 bytes leftover after parsing attributes in process `syz.3.6954'. [ 149.183290][T20018] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.6954'. [ 149.254085][T20032] pim6reg: entered allmulticast mode [ 149.297386][T20038] binder: 20036:20038 ioctl c00c620f 200000000100 returned -22 [ 149.457523][T20066] libceph: resolve '4' (ret=-3): failed [ 149.496521][T20072] netlink: 'syz.3.6980': attribute type 11 has an invalid length. [ 149.623907][T20093] netlink: 'syz.3.6989': attribute type 32 has an invalid length. [ 149.636432][T20096] sit1: entered promiscuous mode [ 149.776742][T20120] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.801894][T20126] program syz.1.7000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.954397][T20157] random: crng reseeded on system resumption [ 149.980671][T20160] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.161152][T20196] program syz.0.7031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.191509][T20199] SELinux: truncated policydb string identifier [ 150.194163][T20199] SELinux: failed to load policy [ 150.258829][T20205] program syz.2.7035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.372783][T20221] netlink: 'syz.0.7043': attribute type 29 has an invalid length. [ 150.420505][ T6173] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 150.594710][ T6173] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 150.597945][ T6173] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.601303][ T6173] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.605698][ T6173] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.608795][ T6173] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.611418][ T6173] usb 6-1: Product: syz [ 150.612947][ T6173] usb 6-1: Manufacturer: syz [ 150.614448][ T6173] usb 6-1: SerialNumber: syz [ 150.617876][ T6173] usb 6-1: config 0 descriptor?? [ 150.621903][ T6173] hub 6-1:0.0: bad descriptor, ignoring hub [ 150.623940][ T6173] hub 6-1:0.0: probe with driver hub failed with error -5 [ 150.629283][ T6173] usb 6-1: selecting invalid altsetting 0 [ 150.680082][T20249] wg1 speed is unknown, defaulting to 1000 [ 150.747217][T20257] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.796154][T20265] netlink: 'syz.0.7063': attribute type 4 has an invalid length. [ 150.833884][ T40] kauditd_printk_skb: 23238 callbacks suppressed [ 150.833902][ T40] audit: type=1400 audit(146.035:27522): avc: denied { prog_run } for pid=20267 comm="syz.0.7065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.901279][ T40] audit: type=1400 audit(146.091:27523): avc: denied { connect } for pid=20274 comm="syz.2.7068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.905010][ T6029] Bluetooth: hci3: link tx timeout [ 150.913332][ T40] audit: type=1400 audit(146.120:27524): avc: denied { read } for pid=20276 comm="syz.0.7069" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.916890][ T6029] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 150.921317][ T40] audit: type=1400 audit(146.120:27525): avc: denied { open } for pid=20276 comm="syz.0.7069" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.921362][ T40] audit: type=1400 audit(146.120:27526): avc: denied { ioctl } for pid=20276 comm="syz.0.7069" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.948881][ T6029] Bluetooth: hci3: link tx timeout [ 150.953556][ T6029] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.971453][ T10] usb 6-1: USB disconnect, device number 3 [ 150.995831][ T40] audit: type=1400 audit(146.185:27527): avc: denied { append } for pid=20280 comm="syz.0.7071" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.069644][ T40] audit: type=1400 audit(146.260:27528): avc: denied { create } for pid=20284 comm="syz.0.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.072594][T20285] netlink: 'syz.0.7073': attribute type 11 has an invalid length. [ 151.078147][ T40] audit: type=1400 audit(146.260:27529): avc: denied { write } for pid=20284 comm="syz.0.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.420478][ T40] audit: type=1400 audit(146.587:27530): avc: denied { ioctl } for pid=20306 comm="syz.0.7084" path="socket:[56611]" dev="sockfs" ino=56611 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.449504][T20310] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.452597][T20310] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 151.482231][T20312] netlink: 'syz.0.7086': attribute type 3 has an invalid length. [ 151.507730][ T40] audit: type=1400 audit(146.662:27531): avc: denied { create } for pid=20313 comm="syz.0.7087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.605154][T20330] random: crng reseeded on system resumption [ 151.615659][T20330] Unrecognized hibernate image header format! [ 151.619160][T20330] PM: hibernation: Image mismatch: architecture specific data [ 152.232763][T20422] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 152.246781][T20425] ipt_rpfilter: unknown options [ 152.308420][T20435] syz.0.7146: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 152.314007][T20437] binder: 20436:20437 ioctl c00c6211 0 returned -14 [ 152.318365][T20435] CPU: 2 UID: 0 PID: 20435 Comm: syz.0.7146 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.318385][T20435] Tainted: [L]=SOFTLOCKUP [ 152.318389][T20435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.318445][T20435] Call Trace: [ 152.318493][T20435] [ 152.318498][T20435] dump_stack_lvl+0x100/0x190 [ 152.318518][T20435] warn_alloc.cold+0x95/0x1c1 [ 152.318531][T20435] ? __pfx_warn_alloc+0x10/0x10 [ 152.318549][T20435] ? mark_held_locks+0x40/0x70 [ 152.318564][T20435] ? lockdep_hardirqs_on+0x78/0x100 [ 152.318578][T20435] ? stack_depot_save_flags+0x479/0x9d0 [ 152.318602][T20435] ? xskq_create+0xfb/0x1d0 [ 152.318619][T20435] __vmalloc_node_range_noprof+0x136c/0x1630 [ 152.318638][T20435] ? xskq_create+0xfb/0x1d0 [ 152.318658][T20435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 152.318678][T20435] ? xskq_create+0xfb/0x1d0 [ 152.318695][T20435] vmalloc_user_noprof+0x9e/0xe0 [ 152.318709][T20435] ? xskq_create+0xfb/0x1d0 [ 152.318727][T20435] xskq_create+0xfb/0x1d0 [ 152.318744][T20435] xsk_setsockopt+0x743/0xab0 [ 152.318761][T20435] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.318776][T20435] ? find_held_lock+0x2b/0x80 [ 152.318786][T20435] ? __fget_files+0x215/0x3d0 [ 152.318802][T20435] ? selinux_socket_setsockopt+0x6a/0x80 [ 152.318815][T20435] ? __pfx_xsk_setsockopt+0x10/0x10 [ 152.318831][T20435] do_sock_setsockopt+0xf3/0x1d0 [ 152.318845][T20435] __sys_setsockopt+0x195/0x220 [ 152.318863][T20435] __x64_sys_setsockopt+0xbd/0x160 [ 152.318878][T20435] ? do_syscall_64+0x90/0xf80 [ 152.318890][T20435] ? lockdep_hardirqs_on+0x78/0x100 [ 152.318901][T20435] do_syscall_64+0x10b/0xf80 [ 152.318912][T20435] ? clear_bhb_loop+0x40/0x90 [ 152.318925][T20435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.318936][T20435] RIP: 0033:0x7ff86c19cdd9 [ 152.318947][T20435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.318957][T20435] RSP: 002b:00007ff86d08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.318969][T20435] RAX: ffffffffffffffda RBX: 00007ff86c415fa0 RCX: 00007ff86c19cdd9 [ 152.318976][T20435] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 152.318982][T20435] RBP: 00007ff86c232d69 R08: 0000000000000004 R09: 0000000000000000 [ 152.318988][T20435] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.318994][T20435] R13: 00007ff86c416038 R14: 00007ff86c415fa0 R15: 00007ffcc3275948 [ 152.319008][T20435] [ 152.319013][T20435] Mem-Info: [ 152.409524][T20435] active_anon:9212 inactive_anon:0 isolated_anon:0 [ 152.409524][T20435] active_file:19690 inactive_file:4312 isolated_file:0 [ 152.409524][T20435] unevictable:1768 dirty:425 writeback:0 [ 152.409524][T20435] slab_reclaimable:8499 slab_unreclaimable:76432 [ 152.409524][T20435] mapped:24692 shmem:2330 pagetables:1405 [ 152.409524][T20435] sec_pagetables:303 bounce:0 [ 152.409524][T20435] kernel_misc_reclaimable:0 [ 152.409524][T20435] free:468163 free_pcp:22209 free_cma:0 [ 152.426218][T20435] Node 0 active_anon:36848kB inactive_anon:0kB active_file:78704kB inactive_file:17104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98784kB dirty:1676kB writeback:0kB shmem:5784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:5436kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.439267][T20435] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 152.451139][T20449] netdevsim netdevsim2 : renamed from netdevsim0 [ 152.451752][T20435] Node 0 DMA free:15228kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 152.465518][T20435] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 152.467862][T20435] Node 0 DMA32 free:212816kB boost:20480kB min:47964kB low:54832kB high:61700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36848kB inactive_anon:0kB active_file:78704kB inactive_file:17104kB unevictable:3536kB writepending:1676kB zspages:0kB present:2080628kB managed:1260944kB mlocked:0kB bounce:0kB free_pcp:75152kB local_pcp:20364kB free_cma:0kB [ 152.478726][T20435] lowmem_reserve[]: 0 0 0 0 0 [ 152.480277][T20435] Node 1 Normal free:1644608kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:144kB unevictable:3536kB writepending:24kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:13000kB local_pcp:916kB free_cma:0kB [ 152.490843][T20435] lowmem_reserve[]: 0 0 0 0 0 [ 152.492406][T20435] Node 0 DMA: 5*4kB (UM) 9*8kB (UM) 8*16kB (UM) 5*32kB (UM) 2*64kB (M) 3*128kB (UM) 0*256kB 2*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 2*4096kB (UE) = 15228kB [ 152.497546][T20435] Node 0 DMA32: 2793*4kB (UME) 2306*8kB (UME) 842*16kB (UME) 812*32kB (UME) 152*64kB (UME) 59*128kB (UME) 32*256kB (UME) 21*512kB (UME) 13*1024kB (UM) 10*2048kB (UME) 18*4096kB (UM) = 212820kB [ 152.503690][T20435] Node 1 Normal: 28*4kB (U) 57*8kB (UM) 27*16kB (U) 13*32kB (UM) 3*64kB (UM) 8*128kB (UM) 4*256kB (U) 7*512kB (UM) 1*1024kB (U) 1*2048kB (M) 399*4096kB (UM) = 1644616kB [ 152.509313][T20435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.512197][T20435] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 152.515441][T20435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.518498][T20435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 152.521401][T20435] 26328 total pagecache pages [ 152.522901][T20435] 0 pages in swap cache [ 152.524226][T20435] Free swap = 124996kB [ 152.526194][T20435] Total swap = 124996kB [ 152.527666][T20435] 1048443 pages RAM [ 152.529216][T20435] 0 pages HighMem/MovableOnly [ 152.531110][T20435] 283896 pages reserved [ 152.532526][T20435] 0 pages cma reserved [ 152.762869][T20494] netlink: 'syz.2.7175': attribute type 10 has an invalid length. [ 152.944159][T20513] sctp: [Deprecated]: syz.2.7185 (pid 20513) Use of int in maxseg socket option. [ 152.944159][T20513] Use struct sctp_assoc_value instead [ 152.998404][T20520] wireguard0: entered allmulticast mode [ 153.007586][T20523] siw: device registration error -23 [ 153.058745][T20531] openvswitch: netlink: EtherType 50a is less than min 600 [ 153.100220][T20540] No such timeout policy "syz1" [ 153.100259][T20541] __nla_validate_parse: 3 callbacks suppressed [ 153.100272][T20541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7197'. [ 153.136508][ T6029] Bluetooth: hci3: command 0x0401 tx timeout [ 153.142024][T20545] wireguard0: entered allmulticast mode [ 153.478548][T20615] dlm: no locking on control device [ 153.524086][T20623] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.7237'. [ 153.624833][T20647] tmpfs: Bad value for 'mpol' [ 153.673266][T20657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 153.676575][T20657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 153.683063][T20657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 153.685869][T20657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 153.689046][T20663] kAFS: unparsable volume name [ 153.729841][T20670] vivid-007: ================= START STATUS ================= [ 153.732248][T20670] vivid-007: Enable Output Cropping: true [ 153.735001][T20670] vivid-007: Enable Output Composing: true [ 153.737623][T20670] vivid-007: Enable Output Scaler: true [ 153.740117][T20670] vivid-007: Tx RGB Quantization Range: Automatic [ 153.742861][T20670] vivid-007: Transmit Mode: HDMI [ 153.750573][T20670] vivid-007: Hotplug Present: 0x00000000 [ 153.752847][T20670] vivid-007: RxSense Present: 0x00000000 [ 153.755787][T20670] vivid-007: EDID Present: 0x00000000 [ 153.758613][T20670] vivid-007: ================== END STATUS ================== [ 153.932480][T20714] netlink: 'syz.1.7278': attribute type 7 has an invalid length. [ 153.997889][T20725] cgroup2: Unknown parameter 'euid' [ 154.113679][T20746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7297'. [ 154.179411][T20756] NILFS (nullb0): couldn't find nilfs on the device [ 154.305092][T20788] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 154.479382][T20824] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.519089][T20831] netlink: 45 bytes leftover after parsing attributes in process `syz.1.7339'. [ 154.545706][T20835] new mount options do not match the existing superblock, will be ignored [ 154.575209][T20841] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 154.629380][T20847] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 154.640536][T20847] bond3 (unregistering): Released all slaves [ 154.739712][T20865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7354'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 155.329646][T20905] cdrom: dropping to single frame dma [ 155.443422][ T6029] Bluetooth: hci3: command 0x0401 tx timeout [ 155.536212][T20925] openvswitch: netlink: IPv6 tunnel dst address is zero [ 156.180190][ T40] kauditd_printk_skb: 11415 callbacks suppressed [ 156.180208][ T40] audit: type=1326 audit(151.033:38947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.193552][ T40] audit: type=1326 audit(151.033:38948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.204583][ T40] audit: type=1326 audit(151.033:38949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.214286][ T40] audit: type=1326 audit(151.033:38950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.222738][ T40] audit: type=1326 audit(151.033:38951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.231010][ T40] audit: type=1326 audit(151.033:38952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.238550][ T40] audit: type=1326 audit(151.033:38953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.245942][ T40] audit: type=1326 audit(151.033:38954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.253009][ T40] audit: type=1326 audit(151.033:38955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 156.261334][ T40] audit: type=1326 audit(151.033:38956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.3.7356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a83f9cdd9 code=0x50000 [ 157.062634][T21057] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 157.134410][T21066] overlayfs: conflicting options: userxattr,metacopy=on [ 157.349178][T21091] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.365932][T21091] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.402615][T21091] bridge1: left promiscuous mode [ 157.405330][T21091] geneve2: left promiscuous mode [ 157.414991][T21091] sit1: left promiscuous mode [ 157.468693][T21103] xt_TCPMSS: Only works on TCP SYN packets [ 157.706863][T21133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7467'. [ 157.891498][T21152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7476'. [ 158.074282][T21180] trusted_key: encrypted_key: keylen parameter is missing [ 158.120516][T21192] netlink: 'syz.3.7494': attribute type 4 has an invalid length. [ 158.376296][T21239] trusted_key: encrypted_key: hex blob is missing [ 158.559614][T21267] netlink: 'syz.3.7528': attribute type 16 has an invalid length. [ 158.562811][T21267] netlink: 'syz.3.7528': attribute type 17 has an invalid length. [ 158.603952][T21267] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.610523][T21267] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.614541][T21267] veth0_to_bond: left allmulticast mode [ 158.642915][T21267] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.650894][T21275] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 158.775815][T21302] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 158.853688][T21312] geneve1: entered allmulticast mode [ 158.900281][T21327] program syz.1.7559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.957852][T21340] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7565'. [ 158.961824][T21340] unsupported nlmsg_type 40 [ 158.984132][T21344] netlink: 'syz.2.7567': attribute type 10 has an invalid length. [ 158.995270][T21346] dummy0: entered allmulticast mode [ 159.106343][T21367] veth1_macvtap: entered promiscuous mode [ 159.275958][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7590'. [ 159.389849][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7600'. [ 159.428359][T21420] netlink: 'syz.1.7604': attribute type 16 has an invalid length. [ 159.431445][T21420] netlink: 'syz.1.7604': attribute type 17 has an invalid length. [ 159.434061][T21420] lo: left promiscuous mode [ 159.460417][T21423] program syz.2.7605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.464792][T21424] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7606'. [ 159.500928][T21420] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.513137][T21420] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.535375][T21420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 159.556084][T21426] bridge8: entered promiscuous mode [ 159.559478][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 159.562945][ T1132] ata1.00: irq_stat 0x40000000 [ 159.563080][T21426] bridge8: entered allmulticast mode [ 159.565894][ T1132] ata1.00: failed command: ZAC MANAGEMENT OUT [ 159.577271][ T1132] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 5 [ 159.577271][ T1132] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 159.586049][ T1132] ata1.00: status: { DRDY ERR } [ 159.587961][ T1132] ata1.00: error: { ABRT } [ 159.597175][ T1132] ata1.00: device reported invalid CHS sector 0 [ 159.620424][T21434] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 159.623672][T21434] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7612'. [ 159.862315][T21442] netlink: 'syz.1.7615': attribute type 1 has an invalid length. [ 159.866257][T21442] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7615'. [ 159.870965][T21442] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7615'. [ 159.874613][T21442] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7615'. [ 159.890672][T21463] netlink: 'syz.0.7623': attribute type 1 has an invalid length. [ 159.893980][T21463] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7623'. [ 159.943924][T21466] netlink: 'syz.2.7624': attribute type 3 has an invalid length. [ 159.947501][T21466] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7624'. [ 160.173403][T21506] team0 (unregistering): Port device team_slave_0 removed [ 160.183352][T21506] team0 (unregistering): Port device team_slave_1 removed [ 160.223335][T21506] team0 (unregistering): Port device geneve0 removed [ 160.252377][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 160.255230][ T1132] ata1: failed to read log page 10h (errno=-5) [ 160.258008][ T1132] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0 [ 160.261241][ T1132] ata1.00: irq_stat 0x40000000 [ 160.263473][ T1132] ata1.00: failed command: WRITE FPDMA QUEUED [ 160.266183][ T1132] ata1.00: cmd 61/18:30:fe:0a:10/00:00:00:00:00/40 tag 6 ncq dma 12288 out [ 160.266183][ T1132] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 160.273524][ T1132] ata1.00: status: { DRDY } [ 160.276555][ T1132] ata1.00: configured for UDMA/100 [ 160.279124][ T1132] ata1: EH complete [ 160.354407][T21522] openvswitch: netlink: Missing key (keys=40, expected=80) [ 160.409416][T21534] overlay: Bad value for 'workdir' [ 160.445429][T21538] Unsupported ieee802154 address type: 0 [ 160.625201][T21562] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 160.632754][T21564] dlm: no locking on control device [ 160.835796][T21596] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.843696][T21596] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 160.846891][T21596] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.849543][T21596] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 160.898730][T21605] bond3: entered promiscuous mode [ 161.193748][T21666] tmpfs: Bad value for 'huge' [ 161.276244][T21679] BIDI support in bsg has been removed. [ 161.820999][T21746] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 161.823801][T21746] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.829126][T21746] vhci_hcd vhci_hcd.0: Device attached [ 161.836088][T21750] cgroup: release_agent respecified [ 161.837307][ T40] kauditd_printk_skb: 13496 callbacks suppressed [ 161.837323][ T40] audit: type=1400 audit(156.329:52453): avc: denied { mounton } for pid=21749 comm="syz.0.7758" path="/1956/file0" dev="tmpfs" ino=9832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.849785][T21747] vhci_hcd: unknown pdu 2 [ 161.853949][ T163] vhci_hcd vhci_hcd.3: stop threads [ 161.863154][ T163] vhci_hcd vhci_hcd.3: release socket [ 161.865204][ T163] vhci_hcd vhci_hcd.3: disconnect device [ 161.875201][ T40] audit: type=1400 audit(156.367:52454): avc: denied { create } for pid=21751 comm="syz.0.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.881711][ T40] audit: type=1400 audit(156.376:52455): avc: denied { write } for pid=21751 comm="syz.0.7760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.908099][ T40] audit: type=1400 audit(156.404:52456): avc: denied { append } for pid=21753 comm="syz.2.7761" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.957374][ T40] audit: type=1400 audit(156.451:52457): avc: denied { create } for pid=21759 comm="syz.0.7764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.965524][ T40] audit: type=1400 audit(156.451:52458): avc: denied { write } for pid=21759 comm="syz.0.7764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.974556][ T40] audit: type=1400 audit(156.451:52459): avc: denied { nlmsg_write } for pid=21759 comm="syz.0.7764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.053399][ T40] audit: type=1400 audit(156.535:52460): avc: denied { create } for pid=21765 comm="syz.1.7767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.056471][T21766] wg1 speed is unknown, defaulting to 1000 [ 162.061280][ T40] audit: type=1400 audit(156.535:52461): avc: denied { write } for pid=21765 comm="syz.1.7767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 162.103371][T21773] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 162.138265][ T40] audit: type=1400 audit(156.619:52462): avc: denied { create } for pid=21778 comm="syz.2.7773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.173189][T21784] sit0: entered promiscuous mode [ 162.348043][T21817] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 162.472645][T21833] program syz.2.7800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.597751][T21861] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 162.828622][T21900] sit0: entered promiscuous mode [ 163.001635][T21928] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 163.043900][T21934] program syz.3.7850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.159043][T21950] geneve1: entered allmulticast mode [ 163.205498][T21966] autofs4:pid:21966:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 163.247816][ T62] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 163.453027][T22019] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.456273][T22019] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 163.460718][T22019] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.465408][T22019] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 163.591710][T22047] usb usb8: usbfs: process 22047 (syz.1.7900) did not claim interface 0 before use [ 163.698905][T22073] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 163.722656][T22079] qrtr: Invalid version 0 [ 163.791532][T22093] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 163.887680][T22120] validate_nla: 8 callbacks suppressed [ 163.887698][T22120] netlink: 'syz.0.7934': attribute type 64 has an invalid length. [ 163.888847][T22121] netlink: 'syz.2.7935': attribute type 1 has an invalid length. [ 163.889636][T22120] netlink: 'syz.0.7934': attribute type 4 has an invalid length. [ 163.923329][T22126] CIFS mount error: No usable UNC path provided in device string! [ 163.923329][T22126] [ 163.927351][T22126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.177849][T22181] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 164.278040][T22208] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 164.380429][T22220] bond3: Unable to set down delay as MII monitoring is disabled [ 164.383902][T22220] bond3 (unregistering): Released all slaves [ 164.476067][T22232] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 164.498741][T22233] bond3: Removing last ns target with arp_interval on [ 164.525494][T22240] ip6t_srh: unknown srh match flags 4000 [ 165.096402][T22366] trusted_key: encrypted_key: master key parameter is missing [ 165.240706][T22392] __nla_validate_parse: 11 callbacks suppressed [ 165.240726][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'. [ 165.246132][T22392] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8066'. [ 165.407435][T22424] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 165.410344][T22424] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.415647][T22424] vhci_hcd vhci_hcd.0: Device attached [ 165.421090][T22426] vhci_hcd: cannot find the pending unlink 4 [ 165.424700][T22426] vhci_hcd: connection closed [ 165.425566][ T12] vhci_hcd vhci_hcd.1: stop threads [ 165.430074][ T12] vhci_hcd vhci_hcd.1: release socket [ 165.432360][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 165.487514][T22439] netlink: 'syz.2.8085': attribute type 4 has an invalid length. [ 165.589113][T22453] 9p: Could not find request transport: v [ 165.737331][T22480] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8102'. [ 165.775964][T22488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.076395][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 166.097800][T22537] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 166.237823][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.241390][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.245496][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.250488][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.254828][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.260440][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.264220][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.266610][T22569] virt_wifi0: entered allmulticast mode [ 166.267017][ T9] usb 7-1: Product: syz [ 166.271313][ T9] usb 7-1: Manufacturer: syz [ 166.277961][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 166.280608][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 166.288316][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 166.291122][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 166.428197][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.440858][T22591] CIFS mount error: No usable UNC path provided in device string! [ 166.440858][T22591] [ 166.444651][T22591] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 166.500790][T22496] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 166.505803][ T54] usb 7-1: USB disconnect, device number 5 [ 166.588347][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 166.591475][ T24] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 166.594255][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.597703][ T24] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.601549][ T24] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 166.604915][ T24] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.610436][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.614752][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 166.618279][ T24] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 166.622783][ T24] usb 6-1: Product: syz [ 166.624543][ T24] usb 6-1: Manufacturer: syz [ 166.626506][ T24] usb 6-1: SerialNumber: syz [ 166.633722][ T24] usb 6-1: config 0 descriptor?? [ 166.638961][ T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.644336][ T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 166.733454][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8167'. [ 166.855366][T22553] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 166.861037][ T54] usb 6-1: USB disconnect, device number 4 [ 166.873468][ T54] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 167.133721][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8184'. [ 167.137713][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8184'. [ 167.178141][T22667] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 167.231017][ T40] kauditd_printk_skb: 257 callbacks suppressed [ 167.231036][ T40] audit: type=1400 audit(161.382:52720): avc: denied { mounton } for pid=22674 comm="syz.2.8194" path="/2140/bus" dev="tmpfs" ino=10765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.232632][T22675] No source specified [ 167.257127][ T40] audit: type=1400 audit(161.411:52721): avc: denied { read } for pid=22676 comm="syz.0.8196" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.270689][ T40] audit: type=1400 audit(161.411:52722): avc: denied { open } for pid=22676 comm="syz.0.8196" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.279277][ T40] audit: type=1400 audit(161.411:52723): avc: denied { ioctl } for pid=22676 comm="syz.0.8196" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.299449][ T40] audit: type=1400 audit(161.448:52724): avc: denied { read } for pid=22683 comm="syz.3.8202" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.304658][T22684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.305721][T22687] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.305743][T22687] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 167.305819][T22687] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.305835][T22687] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 167.308655][ T40] audit: type=1400 audit(161.448:52725): avc: denied { open } for pid=22683 comm="syz.3.8202" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.335723][ T40] audit: type=1400 audit(161.448:52726): avc: denied { ioctl } for pid=22683 comm="syz.3.8202" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.362190][ T40] audit: type=1400 audit(161.504:52727): avc: denied { read write } for pid=22688 comm="syz.0.8201" name="vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 167.370609][ T40] audit: type=1400 audit(161.504:52728): avc: denied { open } for pid=22688 comm="syz.0.8201" path="/dev/vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 167.380327][ T40] audit: type=1400 audit(161.523:52729): avc: denied { read } for pid=22692 comm="syz.3.8203" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.382429][T22693] binder: 22692:22693 ioctl c0306201 200000000140 returned -22 [ 167.417608][T22697] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8206'. [ 167.421131][T22697] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8206'. [ 167.432909][T22699] overlayfs: conflicting options: userxattr,redirect_dir=on [ 167.581542][T22730] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 167.626554][T22738] program syz.3.8224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.630373][T22738] ata1.00: invalid transfer count 0 [ 167.644121][T22742] CIFS mount error: No usable UNC path provided in device string! [ 167.644121][T22742] [ 167.651651][T22742] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 167.671966][T22744] random: crng reseeded on system resumption [ 167.740553][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8235'. [ 167.768346][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8237'. [ 167.918930][T22790] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 167.947692][T22796] netlink: 'syz.2.8252': attribute type 3 has an invalid length. [ 167.950243][T22796] netlink: 'syz.2.8252': attribute type 2 has an invalid length. [ 168.006567][T22806] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.055738][T22814] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 168.133541][T22833] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 168.154684][T22838] SELinux: policydb string length 0 does not match expected length 8 [ 168.157394][T22838] SELinux: failed to load policy [ 168.214591][T22852] sctp: [Deprecated]: syz.1.8278 (pid 22852) Use of int in maxseg socket option. [ 168.214591][T22852] Use struct sctp_assoc_value instead [ 168.548944][T22917] [U] [ 168.550292][T22917] [U] [ 168.551385][T22917] [U] [ 168.552492][T22917] [U] [ 168.553508][T22917] [U] [ 168.554564][T22917] [U] [ 168.555661][T22917] [U] [ 168.556781][T22917] [U] [ 168.558857][T22886] smc: removing ib device syz0 [ 168.566499][T22917] [U] [ 168.567812][T22917] [U] [ 168.569087][T22917] [U] [ 168.570101][T22917] [U] [ 168.571468][T22917] [U] [ 168.572449][T22917] [U] [ 168.573417][T22917] [U] [ 168.574244][T22917] [U] [ 168.575571][T22916] [U] [ 168.674898][T22886] smbdirect: ib_dev[syz0] removed [ 168.894121][T22958] cgroup: Invalid name [ 168.934226][T22964] netlink: 'syz.0.8334': attribute type 2 has an invalid length. [ 169.718554][T23058] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 169.822244][T23074] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 169.831204][T23077] /dev/sg0: Can't lookup blockdev [ 169.879793][T23086] netlink: 'syz.1.8395': attribute type 8 has an invalid length. [ 169.882394][T23086] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 169.924817][T23094] openvswitch: netlink: IP tunnel dst address not specified [ 170.259911][T23149] netlink: 'syz.0.8426': attribute type 11 has an invalid length. [ 170.358648][T23166] netlink: 'syz.2.8436': attribute type 5 has an invalid length. [ 170.410199][T23176] netlink: 'syz.1.8440': attribute type 10 has an invalid length. [ 170.430662][T23180] netlink: 'syz.3.8442': attribute type 23 has an invalid length. [ 170.430669][T23182] openvswitch: netlink: Missing key (keys=40, expected=100) [ 170.515799][T23200] openvswitch: netlink: Flow key attr not present in new flow. [ 170.793731][T23261] netlink: 'syz.1.8482': attribute type 2 has an invalid length. [ 170.797024][T23261] netlink: 'syz.1.8482': attribute type 1 has an invalid length. [ 170.875556][T23271] netlink: 'syz.1.8487': attribute type 63 has an invalid length. [ 170.878504][T23271] __nla_validate_parse: 11 callbacks suppressed [ 170.878520][T23271] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8487'. [ 170.883715][T23271] gretap0: entered allmulticast mode [ 170.886805][T23271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.895718][T23274] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 171.020253][T23297] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 171.079981][T23306] mac80211_hwsim hwsim4 ;: renamed from wlan0 [ 171.208110][T23330] bond4 (unregistering): Released all slaves [ 171.228284][T23336] i2c i2c-1: Invalid block write size 34 [ 171.255231][ T62] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 171.289910][T23312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.296296][T23312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.299814][T23312] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.313305][T23312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.330539][T23346] misc userio: Invalid payload size [ 171.361997][T23349] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 171.487390][T23382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8540'. [ 171.537469][T23392] netlink: 'syz.2.8545': attribute type 21 has an invalid length. [ 171.633844][T23414] netlink: 'syz.3.8556': attribute type 39 has an invalid length. [ 171.671094][T23420] binder: 23419:23420 unknown command 0 [ 171.673032][T23420] binder: 23419:23420 ioctl c0306201 200000000480 returned -22 [ 171.690107][T23423] batadv_slave_0: entered promiscuous mode [ 171.692503][T23423] batadv_slave_0: entered allmulticast mode [ 171.755892][T23436] netlink: 'syz.1.8566': attribute type 3 has an invalid length. [ 171.759027][T23436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8566'. [ 171.804691][T23444] /dev/sr0: Can't open blockdev [ 171.920768][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8579'. [ 172.089558][T23495] openvswitch: netlink: Unknown key attributes 2 [ 172.097741][T23497] tmpfs: Bad value for 'mpol' [ 172.167511][T23508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8604'. [ 172.167679][T23509] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 172.228590][T23519] erspan2: entered promiscuous mode [ 172.299682][T23540] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.8619'. [ 172.412005][T23565] xt_CONNSECMARK: invalid mode: 0 [ 172.659771][T23615] xt_hashlimit: overflow, rate too high: 0 [ 172.675174][T23619] xt_hashlimit: invalid interval [ 172.701579][T23627] Cannot find add_set index 65532 as target [ 172.724915][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 172.724934][ T40] audit: type=1400 audit(166.529:52994): avc: denied { create } for pid=23629 comm="syz.1.8663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.726053][T23630] overlayfs: missing 'lowerdir' [ 172.727639][ T40] audit: type=1400 audit(166.529:52995): avc: denied { mounton } for pid=23628 comm="syz.0.8662" path="/2230/bus" dev="tmpfs" ino=11210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.740820][T23633] program syz.3.8664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.751010][ T40] audit: type=1400 audit(166.529:52996): avc: denied { write } for pid=23629 comm="syz.1.8663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.766204][ T40] audit: type=1400 audit(166.548:52997): avc: denied { ioctl } for pid=23635 comm="syz.1.8666" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.796454][ T40] audit: type=1400 audit(166.586:52998): avc: denied { ioctl } for pid=23642 comm="syz.0.8669" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=67725 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.804513][ T40] audit: type=1400 audit(166.595:52999): avc: denied { read write } for pid=23643 comm="syz.2.8670" name="vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.815781][ T40] audit: type=1400 audit(166.595:53000): avc: denied { open } for pid=23643 comm="syz.2.8670" path="/dev/vhost-net" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.823324][ T40] audit: type=1400 audit(166.595:53001): avc: denied { ioctl } for pid=23643 comm="syz.2.8670" path="/dev/vhost-net" dev="devtmpfs" ino=1299 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.832713][ T40] audit: type=1400 audit(166.623:53002): avc: denied { append } for pid=23649 comm="syz.1.8672" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 172.863184][ T40] audit: type=1400 audit(166.660:53003): avc: denied { read } for pid=23654 comm="syz.0.8676" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.865501][T23656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8676'. [ 172.892788][T23661] trusted_key: encrypted_key: master key parameter '' is invalid [ 172.996798][T23682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8688'. [ 173.052334][T23692] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.201623][T23718] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 173.242542][T23727] random: crng reseeded on system resumption [ 173.317111][T23742] QAT: Stopping all acceleration devices. [ 173.346862][ C2] ata1: illegal qc_active transition (00000000->00000080) [ 173.480967][ T6029] Bluetooth: hci3: command 0x0401 tx timeout [ 173.481000][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 173.505072][T23776] openvswitch: netlink: IP tunnel dst address not specified [ 173.700228][ T1132] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 173.709002][ T1132] ata1.00: configured for UDMA/100 [ 174.137179][T23887] overlay: Bad value for 'workdir' [ 174.198174][T23891] wg1 speed is unknown, defaulting to 1000 [ 174.356521][T23915] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8799'. [ 174.823896][T23991] ieee802154 phy1 wpan1: encryption failed: -22 [ 174.844156][T23995] program syz.1.8838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.923639][ T6173] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.084190][ T6173] usb 5-1: Using ep0 maxpacket: 32 [ 175.088557][ T6173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 175.092188][ T6173] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 175.099219][ T6173] usb 5-1: string descriptor 0 read error: -22 [ 175.101322][ T6173] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 175.104471][ T6173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.109228][T23969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.118347][ T6173] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.120785][ T6173] usb 5-1: MIDIStreaming interface descriptor not found [ 175.191900][ T62] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 175.262104][T24070] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.310332][T24079] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 175.348098][ T6130] usb 5-1: USB disconnect, device number 7 [ 175.456797][ T5444] veth0_macvtap: left promiscuous mode [ 175.571566][T24125] Cannot find add_set index 4 as target [ 175.595287][T24128] usb usb9: usbfs: process 24128 (syz.1.8901) did not claim interface 0 before use [ 175.652388][T24139] syz.3.8906 (24139): /proc/24138/oom_adj is deprecated, please use /proc/24138/oom_score_adj instead. [ 175.697785][T24144] validate_nla: 58 callbacks suppressed [ 175.697806][T24144] netlink: 'syz.3.8908': attribute type 5 has an invalid length. [ 175.714207][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 175.763300][T24158] xt_hashlimit: max too large, truncated to 1048576 [ 175.765755][T24158] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.979330][T24185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8927'. [ 176.145216][T24215] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 176.253857][T24233] netlink: 'syz.2.8950': attribute type 10 has an invalid length. [ 176.258634][T24233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8950'. [ 176.308129][T24235] Process accounting resumed [ 176.488330][T24258] /dev/sg0: Can't lookup blockdev [ 176.833476][T24293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8979'. [ 176.837448][T24293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8979'. [ 176.885086][T24302] net_ratelimit: 3 callbacks suppressed [ 176.885104][T24302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.344116][T24391] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.405015][T24397] netlink: 'syz.1.9029': attribute type 21 has an invalid length. [ 177.408473][T24397] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.513669][T24413] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.517540][T24419] netlink: 'syz.1.9041': attribute type 3 has an invalid length. [ 177.521050][T24419] netlink: 'syz.1.9041': attribute type 1 has an invalid length. [ 177.523587][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9041'. [ 177.533440][T24421] netlink: zone id is out of range [ 177.535167][T24421] netlink: zone id is out of range [ 177.536942][T24421] netlink: set zone limit has 8 unknown bytes [ 177.588228][T24435] 8021q: VLANs not supported on gre0 [ 177.620296][T24443] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9054'. [ 177.702674][T24465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9065'. [ 177.767517][T24481] netlink: 'syz.1.9072': attribute type 3 has an invalid length. [ 177.827680][T24493] overlayfs: overlapping lowerdir path [ 177.923350][T24516] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 178.029773][T24537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9100'. [ 178.033672][T24539] random: crng reseeded on system resumption [ 178.077332][ T40] kauditd_printk_skb: 267 callbacks suppressed [ 178.077350][ T40] audit: type=1400 audit(171.536:53271): avc: denied { setopt } for pid=24545 comm="syz.1.9103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.109191][ T40] audit: type=1400 audit(171.564:53272): avc: denied { wake_alarm } for pid=24551 comm="syz.2.9106" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 178.126649][ T40] audit: type=1400 audit(171.573:53273): avc: denied { create } for pid=24557 comm="syz.0.9109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.138759][ T40] audit: type=1400 audit(171.573:53274): avc: denied { write } for pid=24557 comm="syz.0.9109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 178.160183][ T40] audit: type=1400 audit(171.611:53275): avc: denied { create } for pid=24562 comm="syz.3.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.168649][ T40] audit: type=1400 audit(171.620:53276): avc: denied { read } for pid=24564 comm="syz.0.9113" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.184099][ T40] audit: type=1400 audit(171.620:53277): avc: denied { open } for pid=24564 comm="syz.0.9113" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.193269][ T40] audit: type=1400 audit(171.620:53278): avc: denied { ioctl } for pid=24564 comm="syz.0.9113" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.204852][ T40] audit: type=1400 audit(171.620:53279): avc: denied { write } for pid=24562 comm="syz.3.9112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 178.226478][ T40] audit: type=1400 audit(171.676:53280): avc: denied { create } for pid=24575 comm="syz.2.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.335975][T24593] bond3 (unregistering): Released all slaves [ 178.390403][T24612] netlink: 'syz.3.9135': attribute type 1 has an invalid length. [ 178.465374][T24628] binder: binder_mmap: 24627 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 178.580914][T24656] SET target dimension over the limit! [ 178.597288][T24659] netlink: 'syz.1.9158': attribute type 28 has an invalid length. [ 178.600817][T24659] netlink: 'syz.1.9158': attribute type 3 has an invalid length. [ 178.604083][T24659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9158'. [ 178.628103][T24661] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 178.886227][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9185'. [ 178.901939][T24717] MTD: Couldn't look up './bus': -15 [ 178.925953][T24720] IPv6: Can't replace route, no match found [ 178.927894][T24721] netlink: 'syz.3.9189': attribute type 3 has an invalid length. [ 178.982247][T24731] dlm: no local IP address has been set [ 178.985133][T24731] dlm: cannot start dlm midcomms -107 [ 179.032276][T24743] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 179.065757][T24751] SELinux: syz.2.9203 (24751) set checkreqprot to 1. This is no longer supported. [ 179.120503][T24762] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9209'. [ 179.202099][T24780] bridge_slave_0: left allmulticast mode [ 179.204652][T24780] bridge_slave_0: left promiscuous mode [ 179.207248][T24780] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.214603][T24780] bridge_slave_1: left allmulticast mode [ 179.216989][T24780] bridge_slave_1: left promiscuous mode [ 179.219875][T24780] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.235111][T24780] bond0: (slave bond_slave_0): Releasing backup interface [ 179.265068][T24780] bond0: (slave bond_slave_1): Releasing backup interface [ 179.303808][T24780] team0: Port device team_slave_0 removed [ 179.309720][T24780] team0: Port device team_slave_1 removed [ 179.313913][T24780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.328241][T24797] : entered promiscuous mode [ 179.389346][T24810] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 179.426420][T24819] SELinux: policydb string does not match my string SE Linux [ 179.429567][T24819] SELinux: failed to load policy [ 179.461287][T24830] misc userio: The device must be registered before sending interrupts [ 179.465638][ T62] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.469623][ T62] Bluetooth: hci3: Injecting HCI hardware error event [ 179.473166][ T62] Bluetooth: hci3: hardware error 0x00 [ 179.550638][T24855] program syz.0.9255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.568649][T24859] program syz.2.9257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.571959][T24859] ata1.00: invalid command format 0 [ 179.683108][T24882] bond4: option primary: mode dependency failed, not supported in mode broadcast(3) [ 179.692935][T24882] bond4 (unregistering): Released all slaves [ 179.833796][T24911] program syz.1.9281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.968133][ T5967] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 179.990452][T24934] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 179.993511][T24934] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 180.104335][T24949] Process accounting resumed [ 180.143849][ T5967] usb 8-1: Using ep0 maxpacket: 16 [ 180.160898][ T5967] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 180.166265][ T5967] usb 8-1: config 0 has no interface number 0 [ 180.171450][ T5967] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 180.175595][ T5967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.179756][ T5967] usb 8-1: Product: syz [ 180.182587][ T5967] usb 8-1: Manufacturer: syz [ 180.184543][ T5967] usb 8-1: SerialNumber: syz [ 180.191464][ T5967] usb 8-1: config 0 descriptor?? [ 180.195863][ T5967] hub 8-1:0.132: bad descriptor, ignoring hub [ 180.198753][ T5967] hub 8-1:0.132: probe with driver hub failed with error -5 [ 180.206392][ T5967] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input26 [ 180.237362][T24971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 180.411059][T24997] IPVS: length: 18 != 8 [ 180.594870][T25026] ip6t_REJECT: ECHOREPLY is not supported [ 180.886473][T25071] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.946313][T25079] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.976910][T25085] random: crng reseeded on system resumption [ 181.146695][T25099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.474748][T25123] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 181.651119][ T5967] usb 8-1: USB disconnect, device number 11 [ 181.689643][ T62] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.739271][T25164] usb usb2: usbfs: interface 0 claimed by hub while 'syz.1.9405' sets config #0 [ 181.743488][T25166] nfs: Unknown parameter './file0' [ 181.764891][T25168] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 181.786382][T25173] __nla_validate_parse: 6 callbacks suppressed [ 181.786401][T25173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9408'. [ 181.792106][T25173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9408'. [ 181.809060][T25177] --map-set only usable from mangle table [ 182.184997][T25230] validate_nla: 8 callbacks suppressed [ 182.185010][T25230] netlink: 'syz.1.9437': attribute type 2 has an invalid length. [ 182.254511][T25243] program syz.3.9444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.353374][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9449'. [ 182.365570][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9450'. [ 182.487444][T25277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9458'. [ 182.494947][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9459'. [ 182.516755][T25279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.600556][T25288] bridge_slave_0: left allmulticast mode [ 182.603002][T25288] bridge_slave_0: left promiscuous mode [ 182.605558][T25288] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.611324][T25288] bridge_slave_1: left allmulticast mode [ 182.613811][T25288] bridge_slave_1: left promiscuous mode [ 182.616525][T25288] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.627923][T25288] bond0: (slave bond_slave_1): Releasing backup interface [ 182.692070][T25288] team0: Port device team_slave_0 removed [ 182.701964][T25288] team0: Port device team_slave_1 removed [ 182.704516][T25288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.706993][T25288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.710417][T25288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.712944][T25288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.716902][T25288] net_ratelimit: 1 callbacks suppressed [ 182.716913][T25288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.827843][T25305] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 182.892783][T25314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9474'. [ 182.901084][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9474'. [ 182.916782][T25314] geneve3: entered promiscuous mode [ 182.919043][T25314] geneve3: entered allmulticast mode [ 183.030219][T25335] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.9484'. [ 183.101356][T25345] CIFS mount error: No usable UNC path provided in device string! [ 183.101356][T25345] [ 183.105069][T25345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.212887][T25359] netlink: 'syz.3.9496': attribute type 63 has an invalid length. [ 183.302065][T25365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.415934][T25388] netlink: 'syz.2.9510': attribute type 1 has an invalid length. [ 183.433035][T25393] netlink: 'syz.3.9513': attribute type 5 has an invalid length. [ 183.454349][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 183.454368][ T40] audit: type=1400 audit(176.570:53522): avc: denied { create } for pid=25394 comm="syz.1.9514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.467460][ T40] audit: type=1400 audit(176.570:53523): avc: denied { ioctl } for pid=25394 comm="syz.1.9514" path="socket:[72311]" dev="sockfs" ino=72311 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.496714][ T40] audit: type=1400 audit(176.608:53524): avc: denied { search } for pid=25402 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.505411][ T40] audit: type=1400 audit(176.608:53525): avc: denied { search } for pid=25402 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.514465][ T40] audit: type=1400 audit(176.608:53526): avc: denied { search } for pid=25402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.531957][ T40] audit: type=1400 audit(176.608:53527): avc: denied { search } for pid=25402 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.541326][ T40] audit: type=1400 audit(176.617:53528): avc: denied { read open } for pid=25405 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.553280][ T40] audit: type=1400 audit(176.617:53529): avc: denied { getattr } for pid=25405 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.561965][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 183.561991][T25414] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 183.568036][ T40] audit: type=1400 audit(176.636:53530): avc: denied { add_name } for pid=25402 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.578276][ T40] audit: type=1400 audit(176.636:53531): avc: denied { create } for pid=25402 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.590009][T25416] CIFS: VFS: UNC: missing share name [ 183.596982][T25416] CIFS: VFS: Malformed UNC in devname [ 183.653327][T25429] geneve2: entered promiscuous mode [ 183.655133][T25429] geneve2: entered allmulticast mode [ 183.727496][T25445] tmpfs: User quota block hardlimit too large. [ 183.762302][T25455] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 183.979452][T25492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.991963][T25497] vcan1: entered allmulticast mode [ 184.057585][T25508] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 184.129922][T25522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.376393][T25566] [U] zͻi[27| [ 184.378218][T25566] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 184.384059][T25566] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 184.387235][T25566] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 184.398102][T25566] [U] 8)X)YvxRĻbmbN@ox;JD, [ 184.407040][T25566] [U] *Cn3v7KEXgt_3 [ 184.409266][T25566] [U] D/QazҬEHgE1$_ks=R@ [ 184.411696][T25566] [U] ϼcEv @ [ 184.413254][T25566] [U] a% [ 184.415130][T25566] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 184.422917][T25566] [U] f1p3 [ 184.424680][T25566] [U] N0[L;a_l&kMC [ 184.426814][T25566] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 184.432050][T25572] ipt_REJECT: ECHOREPLY no longer supported. [ 184.432223][T25564] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 rejected, failed to enable media [ 199.279181][T27915] tipc: Started in network mode [ 199.282177][T27915] tipc: Node identity ac141424, cluster identity 4711 [ 199.288299][T27915] tipc: New replicast peer: 10.1.1.0 [ 199.290356][T27915] tipc: Enabled bearer , priority 10 [ 199.784486][T27968] xt_connbytes: Forcing CT accounting to be enabled [ 199.985219][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 199.985238][ T40] audit: type=1400 audit(524479.996:54301): avc: denied { read append } for pid=27975 comm="syz.1.10743" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 199.999682][ T40] audit: type=1400 audit(524479.996:54302): avc: denied { ioctl open } for pid=27975 comm="syz.1.10743" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.009584][ T40] audit: type=1400 audit(524479.996:54303): avc: denied { write } for pid=27975 comm="syz.1.10743" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.020310][ T40] audit: type=1400 audit(524480.033:54304): avc: denied { create } for pid=27977 comm="syz.0.10744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.028437][ T40] audit: type=1400 audit(524480.033:54305): avc: denied { getopt } for pid=27977 comm="syz.0.10744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.267073][ T40] audit: type=1400 audit(524480.256:54306): avc: denied { mount } for pid=27992 comm="syz.0.10751" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.276351][ T40] audit: type=1400 audit(524480.256:54307): avc: denied { remount } for pid=27992 comm="syz.0.10751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.288437][ T40] audit: type=1400 audit(524480.274:54308): avc: denied { unmount } for pid=6022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 200.318390][ T40] audit: type=1400 audit(524480.302:54309): avc: denied { create } for pid=27994 comm="syz.0.10752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.326809][ T40] audit: type=1400 audit(524480.302:54310): avc: denied { bind } for pid=27994 comm="syz.0.10752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.353891][T27997] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 200.466542][T28005] CUSE: unknown device info "" [ 200.468565][T28005] CUSE: zero length info key specified [ 200.507444][ T24] tipc: Node number set to 2886997028 [ 201.113026][T27991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.116066][T27991] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 201.120524][T27991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.123264][T27991] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 201.441648][T28068] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 201.461641][T28075] pim6reg99999999: entered allmulticast mode [ 201.497860][T28082] __nla_validate_parse: 9 callbacks suppressed [ 201.497880][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10787'. [ 201.502671][T28081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10792'. [ 201.505219][T28082] net_ratelimit: 13 callbacks suppressed [ 201.505234][T28082] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 201.508009][T28081] Zero length message leads to an empty skb [ 201.621534][T28104] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 201.621534][T28104] Please contact the netfilter-devel mailing list or update your nftables rules. [ 202.045965][T28153] Bluetooth: MGMT ver 1.23 [ 202.609363][T28201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10843'. [ 202.651637][T28205] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10845'. [ 202.914566][T28224] comedi: valid board names for 8255 driver are: [ 202.917319][T28224] 8255 [ 202.918529][T28224] comedi: valid board names for vmk80xx driver are: [ 202.922654][T28224] vmk80xx [ 202.924318][T28224] comedi: valid board names for usbduxsigma driver are: [ 202.927469][T28224] usbduxsigma [ 202.928944][T28224] comedi: valid board names for usbduxfast driver are: [ 202.931833][T28224] usbduxfast [ 202.933425][T28224] comedi: valid board names for usbdux driver are: [ 202.936274][T28224] usbdux [ 202.937571][T28224] comedi: valid board names for ni6501 driver are: [ 202.940309][T28224] ni6501 [ 202.941656][T28224] comedi: valid board names for dt9812 driver are: [ 202.945290][T28224] dt9812 [ 202.946594][T28224] comedi: valid board names for ni_labpc_cs driver are: [ 202.949523][T28224] ni_labpc_cs [ 202.950918][T28224] comedi: valid board names for ni_daq_700 driver are: [ 202.953823][T28224] ni_daq_700 [ 202.955502][T28224] comedi: valid board names for labpc_pci driver are: [ 202.958462][T28224] labpc_pci [ 202.959913][T28224] comedi: valid board names for adl_pci9118 driver are: [ 202.965359][T28224] pci9118dg [ 202.966901][T28224] pci9118hg [ 202.968375][T28224] pci9118hr [ 202.969741][T28224] comedi: valid board names for 8255_pci driver are: [ 202.972550][T28224] 8255_pci [ 202.973945][T28224] comedi: valid board names for s526 driver are: [ 202.976801][T28224] s526 [ 202.978089][T28224] comedi: valid board names for multiq3 driver are: [ 202.981028][T28224] multiq3 [ 202.982415][T28224] comedi: valid board names for pcmuio driver are: [ 202.985232][T28224] pcmuio48 [ 202.986598][T28224] pcmuio96 [ 202.988130][T28224] comedi: valid board names for pcmmio driver are: [ 202.991052][T28224] pcmmio [ 202.992424][T28224] comedi: valid board names for pcmda12 driver are: [ 202.995260][T28224] pcmda12 [ 202.996660][T28224] comedi: valid board names for pcmad driver are: [ 202.999495][T28224] pcmad12 [ 203.000892][T28224] pcmad16 [ 203.002229][T28224] comedi: valid board names for ni_labpc driver are: [ 203.005099][T28224] lab-pc-1200 [ 203.006560][T28224] lab-pc-1200ai [ 203.008147][T28224] lab-pc+ [ 203.009631][T28224] comedi: valid board names for atmio16 driver are: [ 203.012443][T28224] atmio16 [ 203.013901][T28224] atmio16d [ 203.015256][T28224] comedi: valid board names for ni_at_ao driver are: [ 203.018173][T28224] at-ao-6 [ 203.019651][T28224] at-ao-10 [ 203.021043][T28224] comedi: valid board names for ni_at_a2150 driver are: [ 203.023918][T28224] ni_at_a2150 [ 203.025421][T28224] comedi: valid board names for adq12b driver are: [ 203.028206][T28224] adq12b [ 203.029560][T28224] comedi: valid board names for mpc624 driver are: [ 203.032579][T28224] mpc624 [ 203.033893][T28224] comedi: valid board names for c6xdigio driver are: [ 203.036778][T28224] c6xdigio [ 203.038108][T28224] comedi: valid board names for aio_iiro_16 driver are: [ 203.040931][T28224] aio_iiro_16 [ 203.042668][T28224] comedi: valid board names for aio_aio12_8 driver are: [ 203.045660][T28224] aio_aio12_8 [ 203.047146][T28224] aio_ai12_8 [ 203.048579][T28224] aio_ao12_4 [ 203.050018][T28224] comedi: valid board names for fl512 driver are: [ 203.053090][T28224] fl512 [ 203.054301][T28224] comedi: valid board names for dmm32at driver are: [ 203.057172][T28224] dmm32at [ 203.058528][T28224] comedi: valid board names for dt282x driver are: [ 203.061310][T28224] dt2821 [ 203.062699][T28224] dt2821-f [ 203.064138][T28224] dt2821-g [ 203.065531][T28224] dt2823 [ 203.066757][T28224] dt2824-pgh [ 203.068179][T28224] dt2824-pgl [ 203.069674][T28224] dt2825 [ 203.071027][T28224] dt2827 [ 203.072283][T28224] dt2828 [ 203.073667][T28224] dt2829 [ 203.074899][T28224] dt21-ez [ 203.076247][T28224] dt23-ez [ 203.077605][T28224] dt24-ez [ 203.078971][T28224] dt24-ez-pgl [ 203.080469][T28224] comedi: valid board names for dt2817 driver are: [ 203.083216][T28224] dt2817 [ 203.084603][T28224] comedi: valid board names for dt2815 driver are: [ 203.087462][T28224] dt2815 [ 203.088801][T28224] comedi: valid board names for dt2814 driver are: [ 203.091564][T28224] dt2814 [ 203.092870][T28224] comedi: valid board names for dt2811 driver are: [ 203.095691][T28224] dt2811-pgh [ 203.097163][T28224] dt2811-pgl [ 203.098556][T28224] comedi: valid board names for dt2801 driver are: [ 203.101402][T28224] dt2801 [ 203.102719][T28224] comedi: valid board names for das6402 driver are: [ 203.105566][T28224] das6402-12 [ 203.107103][T28224] das6402-16 [ 203.108585][T28224] comedi: valid board names for das1800 driver are: [ 203.111407][T28224] das-1701st [ 203.112908][T28224] das-1701st-da [ 203.114545][T28224] das-1702st [ 203.116028][T28224] das-1702st-da [ 203.117587][T28224] das-1702hr [ 203.119077][T28224] das-1702hr-da [ 203.120627][T28224] das-1701ao [ 203.122114][T28224] das-1702ao [ 203.123560][T28224] das-1801st [ 203.125041][T28224] das-1801st-da [ 203.126594][T28224] das-1802st [ 203.128197][T28224] das-1802st-da [ 203.129786][T28224] das-1802hr [ 203.131254][T28224] das-1802hr-da [ 203.132818][T28224] das-1801hc [ 203.134252][T28224] das-1802hc [ 203.135723][T28224] das-1801ao [ 203.137168][T28224] das-1802ao [ 203.138735][T28224] comedi: valid board names for das800 driver are: [ 203.141456][T28224] das-800 [ 203.142862][T28224] cio-das800 [ 203.144316][T28224] das-801 [ 203.145705][T28224] cio-das801 [ 203.147212][T28224] das-802 [ 203.148595][T28224] cio-das802 [ 203.150317][T28224] cio-das802/16 [ 203.151859][T28224] comedi: valid board names for isa-das08 driver are: [ 203.154787][T28224] isa-das08 [ 203.156226][T28224] das08-pgm [ 203.157705][T28224] das08-pgh [ 203.159072][T28224] das08-pgl [ 203.160583][T28224] das08-aoh [ 203.162016][T28224] das08-aol [ 203.163439][T28224] das08-aom [ 203.164634][T28224] das08/jr-ao [ 203.165803][T28224] das08jr-16-ao [ 203.167049][T28224] pc104-das08 [ 203.168262][T28224] das08jr/16 [ 203.169707][T28224] comedi: valid board names for das16m1 driver are: [ 203.172599][T28224] das16m1 [ 203.173925][T28224] comedi: valid board names for dac02 driver are: [ 203.176704][T28224] dac02 [ 203.178017][T28224] comedi: valid board names for rti802 driver are: [ 203.180742][T28224] rti802 [ 203.182129][T28224] comedi: valid board names for rti800 driver are: [ 203.184906][T28224] rti800 [ 203.186268][T28224] rti815 [ 203.187545][T28224] comedi: valid board names for pcm3724 driver are: [ 203.190328][T28224] pcm3724 [ 203.191830][T28224] comedi: valid board names for pcl818 driver are: [ 203.194597][T28224] pcl818l [ 203.195906][T28224] pcl818h [ 203.197178][T28224] pcl818hd [ 203.198546][T28224] pcl818hg [ 203.199992][T28224] pcl818 [ 203.201288][T28224] pcl718 [ 203.202659][T28224] pcm3718 [ 203.204003][T28224] comedi: valid board names for pcl816 driver are: [ 203.206702][T28224] pcl816 [ 203.207977][T28224] pcl814b [ 203.209164][T28224] comedi: valid board names for pcl812 driver are: [ 203.211483][T28224] pcl812 [ 203.212576][T28224] pcl812pg [ 203.213743][T28224] acl8112pg [ 203.214848][T28224] acl8112dg [ 203.215927][T28224] acl8112hg [ 203.217189][T28224] a821pgl [ 203.218549][T28224] a821pglnda [ 203.219892][T28224] a821pgh [ 203.220984][T28224] a822pgl [ 203.222259][T28224] a822pgh [ 203.223644][T28224] a823pgl [ 203.225141][T28224] a823pgh [ 203.226490][T28224] pcl813 [ 203.227737][T28224] pcl813b [ 203.229153][T28224] acl8113 [ 203.230489][T28224] iso813 [ 203.231768][T28224] acl8216 [ 203.233111][T28224] a826pg [ 203.234430][T28224] comedi: valid board names for pcl730 driver are: [ 203.237270][T28224] pcl730 [ 203.238559][T28224] iso730 [ 203.239768][T28224] acl7130 [ 203.241120][T28224] pcm3730 [ 203.242480][T28224] pcl725 [ 203.243848][T28224] p8r8dio [ 203.245204][T28224] acl7225b [ 203.246677][T28224] p16r16dio [ 203.248125][T28224] pcl733 [ 203.249387][T28224] pcl734 [ 203.250610][T28224] opmm-1616-xt [ 203.252119][T28224] pearl-mm-p [ 203.253577][T28224] ir104-pbf [ 203.255015][T28224] comedi: valid board names for pcl726 driver are: [ 203.257812][T28224] pcl726 [ 203.259118][T28224] pcl727 [ 203.260441][T28224] pcl728 [ 203.261740][T28224] acl6126 [ 203.263099][T28224] acl6128 [ 203.264452][T28224] comedi: valid board names for pcl724 driver are: [ 203.267355][T28224] pcl724 [ 203.268695][T28224] pcl722 [ 203.270076][T28224] pcl731 [ 203.271358][T28224] acl7122 [ 203.272746][T28224] acl7124 [ 203.274074][T28224] pet48dio [ 203.275506][T28224] pcmio48 [ 203.276885][T28224] onyx-mm-dio [ 203.278460][T28224] comedi: valid board names for pcl711 driver are: [ 203.281216][T28224] pcl711 [ 203.282526][T28224] pcl711b [ 203.283878][T28224] acl8112hg [ 203.285308][T28224] acl8112dg [ 203.286798][T28224] comedi: valid board names for amplc_pc263 driver are: [ 203.289849][T28224] pc263 [ 203.291102][T28224] comedi: valid board names for amplc_pc236 driver are: [ 203.294051][T28224] pc36at [ 203.295355][T28224] comedi: valid board names for amplc_dio200 driver are: [ 203.298265][T28224] pc212e [ 203.299624][T28224] pc214e [ 203.301045][T28224] pc215e [ 203.302368][T28224] pc218e [ 203.303670][T28224] pc272e [ 203.304941][T28224] comedi: valid board names for comedi_parport driver are: [ 203.308093][T28224] comedi_parport [ 203.309788][T28224] comedi: valid board names for comedi_test driver are: [ 203.312927][T28224] comedi_test [ 203.314393][T28224] comedi: valid board names for comedi_bond driver are: [ 203.317357][T28224] comedi_bond [ 203.390358][T28238] netlink: 'syz.2.10860': attribute type 1 has an invalid length. [ 203.393682][T28238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10860'. [ 203.613723][ T5967] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 203.618210][ T5967] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 203.658181][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10876'. [ 204.029258][T28322] vlan0: entered allmulticast mode [ 204.031754][T28322] bond0: entered allmulticast mode [ 204.060348][T28329] xt_limit: Overflow, try lower: 271964/0 [ 204.130934][T28337] usb usb7: usbfs: process 28337 (syz.3.10908) did not claim interface 0 before use [ 204.190679][T28346] UHID_CREATE from different security context by process 4689 (syz.3.10912), this is not allowed. [ 204.471890][T28378] F2FS-fs: Conflicting test_dummy_encryption options [ 204.570464][T28397] tipc: Enabling of bearer rejected, failed to enable media [ 204.642142][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10941'. [ 204.646716][T28407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10941'. [ 204.696201][T28415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10945'. [ 204.935751][ T6029] Bluetooth: hci4: command 0xfc11 tx timeout [ 204.941221][ T62] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 205.045408][T28452] vlan2: entered allmulticast mode [ 205.047652][T28452] bond0: entered allmulticast mode [ 205.196178][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10969'. [ 205.406740][T28483] netlink: 'syz.1.10977': attribute type 11 has an invalid length. [ 205.415742][ T40] kauditd_printk_skb: 180 callbacks suppressed [ 205.415760][ T40] audit: type=1400 audit(524485.039:54491): avc: denied { ioctl } for pid=28478 comm="syz.3.10975" path="socket:[81909]" dev="sockfs" ino=81909 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.472591][ T40] audit: type=1400 audit(524485.086:54492): avc: denied { ioctl } for pid=28487 comm="syz.1.10979" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.750991][ T40] audit: type=1400 audit(524485.346:54493): avc: denied { create } for pid=28497 comm="syz.0.10984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.760743][ T40] audit: type=1400 audit(524485.355:54494): avc: denied { write } for pid=28497 comm="syz.0.10984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.768868][ T40] audit: type=1400 audit(524485.355:54495): avc: denied { read } for pid=28497 comm="syz.0.10984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.778533][ T40] audit: type=1400 audit(524485.355:54496): avc: denied { prog_run } for pid=28499 comm="syz.2.10985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 205.807003][ T40] audit: type=1400 audit(524485.392:54497): avc: denied { append } for pid=28501 comm="syz.3.10986" name="comedi3" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 205.809336][T28502] comedi: valid board names for 8255 driver are: [ 205.820192][T28502] 8255 [ 205.821433][T28502] comedi: valid board names for vmk80xx driver are: [ 205.824261][T28502] vmk80xx [ 205.825509][T28502] comedi: valid board names for usbduxsigma driver are: [ 205.828232][T28502] usbduxsigma [ 205.832189][T28502] comedi: valid board names for usbduxfast driver are: [ 205.835270][T28502] usbduxfast [ 205.836691][T28502] comedi: valid board names for usbdux driver are: [ 205.839430][T28502] usbdux [ 205.841069][T28502] comedi: valid board names for ni6501 driver are: [ 205.843822][T28502] ni6501 [ 205.845178][T28502] comedi: valid board names for dt9812 driver are: [ 205.847950][T28502] dt9812 [ 205.849242][T28502] comedi: valid board names for ni_labpc_cs driver are: [ 205.852408][T28502] ni_labpc_cs [ 205.853828][T28502] comedi: valid board names for ni_daq_700 driver are: [ 205.856913][T28502] ni_daq_700 [ 205.858381][T28502] comedi: valid board names for labpc_pci driver are: [ 205.861215][T28502] labpc_pci [ 205.862731][T28502] comedi: valid board names for adl_pci9118 driver are: [ 205.865895][T28502] pci9118dg [ 205.866997][T28502] pci9118hg [ 205.868111][T28502] pci9118hr [ 205.869308][T28502] comedi: valid board names for 8255_pci driver are: [ 205.871609][T28502] 8255_pci [ 205.872856][T28502] comedi: valid board names for s526 driver are: [ 205.874958][T28502] s526 [ 205.876054][T28502] comedi: valid board names for multiq3 driver are: [ 205.878183][T28502] multiq3 [ 205.879221][T28502] comedi: valid board names for pcmuio driver are: [ 205.881339][T28502] pcmuio48 [ 205.882402][T28502] pcmuio96 [ 205.883545][T28502] comedi: valid board names for pcmmio driver are: [ 205.885632][T28502] pcmmio [ 205.886522][ T40] audit: type=1400 audit(524485.476:54498): avc: denied { read } for pid=28505 comm="syz.2.10987" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.894191][T28502] comedi: valid board names for pcmda12 driver are: [ 205.894203][T28502] pcmda12 [ 205.894208][T28502] comedi: valid board names for pcmad driver are: [ 205.894213][T28502] pcmad12 [ 205.897493][ T40] audit: type=1400 audit(524485.476:54499): avc: denied { open } for pid=28505 comm="syz.2.10987" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.898028][T28502] pcmad16 [ 205.900257][ T40] audit: type=1400 audit(524485.476:54500): avc: denied { ioctl } for pid=28505 comm="syz.2.10987" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 205.901427][T28502] comedi: valid board names for ni_labpc driver are: [ 205.901435][T28502] lab-pc-1200 [ 205.901439][T28502] lab-pc-1200ai [ 205.901443][T28502] lab-pc+ [ 205.901448][T28502] comedi: valid board names for atmio16 driver are: [ 205.901453][T28502] atmio16 [ 205.901458][T28502] atmio16d [ 205.901463][T28502] comedi: valid board names for ni_at_ao driver are: [ 205.932962][T28502] at-ao-6 [ 205.934150][T28502] at-ao-10 [ 205.935629][T28502] comedi: valid board names for ni_at_a2150 driver are: [ 205.938139][T28502] ni_at_a2150 [ 205.939519][T28502] comedi: valid board names for adq12b driver are: [ 205.942156][T28502] adq12b [ 205.943346][T28502] comedi: valid board names for mpc624 driver are: [ 205.945444][T28502] mpc624 [ 205.946653][T28502] comedi: valid board names for c6xdigio driver are: [ 205.949380][T28502] c6xdigio [ 205.950430][T28502] comedi: valid board names for aio_iiro_16 driver are: [ 205.952701][T28502] aio_iiro_16 [ 205.953411][T28510] program syz.2.10989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.953867][T28502] comedi: valid board names for aio_aio12_8 driver are: [ 205.953875][T28502] aio_aio12_8 [ 205.961754][T28502] aio_ai12_8 [ 205.962881][T28502] aio_ao12_4 [ 205.963993][T28502] comedi: valid board names for fl512 driver are: [ 205.966046][T28502] fl512 [ 205.967000][T28502] comedi: valid board names for dmm32at driver are: [ 205.969192][T28502] dmm32at [ 205.970124][T28502] comedi: valid board names for dt282x driver are: [ 205.971987][T28502] dt2821 [ 205.973056][T28502] dt2821-f [ 205.974285][T28502] dt2821-g [ 205.975646][T28502] dt2823 [ 205.976685][T28502] dt2824-pgh [ 205.977787][T28502] dt2824-pgl [ 205.978889][T28502] dt2825 [ 205.980096][T28502] dt2827 [ 205.981077][T28502] dt2828 [ 205.982051][T28502] dt2829 [ 205.983022][T28502] dt21-ez [ 205.984047][T28502] dt23-ez [ 205.985045][T28502] dt24-ez [ 205.986113][T28502] dt24-ez-pgl [ 205.987894][T28502] comedi: valid board names for dt2817 driver are: [ 205.990126][T28502] dt2817 [ 205.991400][T28502] comedi: valid board names for dt2815 driver are: [ 205.993779][T28512] new mount options do not match the existing superblock, will be ignored [ 205.993781][T28502] dt2815 [ 205.993789][T28502] comedi: valid board names for dt2814 driver are: [ 205.993794][T28502] dt2814 [ 206.000457][T28512] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 206.001396][T28502] comedi: valid board names for dt2811 driver are: [ 206.001405][T28502] dt2811-pgh [ 206.001410][T28502] dt2811-pgl [ 206.001414][T28502] comedi: valid board names for dt2801 driver are: [ 206.001419][T28502] dt2801 [ 206.001423][T28502] comedi: valid board names for das6402 driver are: [ 206.001428][T28502] das6402-12 [ 206.001432][T28502] das6402-16 [ 206.019430][T28502] comedi: valid board names for das1800 driver are: [ 206.022861][T28502] das-1701st [ 206.024065][T28502] das-1701st-da [ 206.025279][T28502] das-1702st [ 206.026392][T28502] das-1702st-da [ 206.027740][T28502] das-1702hr [ 206.029178][T28502] das-1702hr-da [ 206.030717][T28502] das-1701ao [ 206.031883][T28502] das-1702ao [ 206.033011][T28502] das-1801st [ 206.034248][T28502] das-1801st-da [ 206.035455][T28502] das-1802st [ 206.036807][T28502] das-1802st-da [ 206.038353][T28502] das-1802hr [ 206.039791][T28502] das-1802hr-da [ 206.041305][T28502] das-1801hc [ 206.042669][T28502] das-1802hc [ 206.043929][T28502] das-1801ao [ 206.045088][T28502] das-1802ao [ 206.046195][T28502] comedi: valid board names for das800 driver are: [ 206.048271][T28502] das-800 [ 206.049270][T28502] cio-das800 [ 206.050431][T28502] das-801 [ 206.051506][T28502] cio-das801 [ 206.052710][T28502] das-802 [ 206.053742][T28502] cio-das802 [ 206.054878][T28502] cio-das802/16 [ 206.056278][T28502] comedi: valid board names for isa-das08 driver are: [ 206.058499][T28502] isa-das08 [ 206.059714][T28502] das08-pgm [ 206.060932][T28502] das08-pgh [ 206.062362][T28502] das08-pgl [ 206.063614][T28502] das08-aoh [ 206.064852][T28502] das08-aol [ 206.066033][T28502] das08-aom [ 206.067773][T28502] das08/jr-ao [ 206.069269][T28502] das08jr-16-ao [ 206.070935][T28502] pc104-das08 [ 206.072567][T28502] das08jr/16 [ 206.074041][T28502] comedi: valid board names for das16m1 driver are: [ 206.077191][T28502] das16m1 [ 206.078536][T28502] comedi: valid board names for dac02 driver are: [ 206.080919][T28502] dac02 [ 206.081868][T28502] comedi: valid board names for rti802 driver are: [ 206.084086][T28502] rti802 [ 206.085109][T28502] comedi: valid board names for rti800 driver are: [ 206.087580][T28502] rti800 [ 206.088693][T28502] rti815 [ 206.089720][T28502] comedi: valid board names for pcm3724 driver are: [ 206.091830][T28502] pcm3724 [ 206.092849][T28502] comedi: valid board names for pcl818 driver are: [ 206.094926][T28502] pcl818l [ 206.095934][T28502] pcl818h [ 206.096936][T28502] pcl818hd [ 206.097965][T28502] pcl818hg [ 206.099358][T28502] pcl818 [ 206.100354][T28502] pcl718 [ 206.101320][T28502] pcm3718 [ 206.102363][T28502] comedi: valid board names for pcl816 driver are: [ 206.104434][T28502] pcl816 [ 206.105418][T28502] pcl814b [ 206.106413][T28502] comedi: valid board names for pcl812 driver are: [ 206.108443][T28502] pcl812 [ 206.109597][T28502] pcl812pg [ 206.110645][T28502] acl8112pg [ 206.111744][T28502] acl8112dg [ 206.112794][T28502] acl8112hg [ 206.113856][T28502] a821pgl [ 206.114950][T28502] a821pglnda [ 206.116174][T28502] a821pgh [ 206.117176][T28502] a822pgl [ 206.118191][T28502] a822pgh [ 206.119234][T28502] a823pgl [ 206.120450][T28502] a823pgh [ 206.121439][T28502] pcl813 [ 206.122428][T28502] pcl813b [ 206.123581][T28502] acl8113 [ 206.124613][T28502] iso813 [ 206.125585][T28502] acl8216 [ 206.126590][T28502] a826pg [ 206.127566][T28502] comedi: valid board names for pcl730 driver are: [ 206.129766][T28502] pcl730 [ 206.130896][T28502] iso730 [ 206.131926][T28502] acl7130 [ 206.133033][T28502] pcm3730 [ 206.134221][T28502] pcl725 [ 206.135273][T28502] p8r8dio [ 206.136385][T28502] acl7225b [ 206.137561][T28502] p16r16dio [ 206.138841][T28502] pcl733 [ 206.140021][T28502] pcl734 [ 206.141078][T28502] opmm-1616-xt [ 206.142330][T28502] pearl-mm-p [ 206.143456][T28502] ir104-pbf [ 206.144542][T28502] comedi: valid board names for pcl726 driver are: [ 206.146674][T28502] pcl726 [ 206.147640][T28502] pcl727 [ 206.148714][T28502] pcl728 [ 206.149703][T28502] acl6126 [ 206.150712][T28502] acl6128 [ 206.151724][T28502] comedi: valid board names for pcl724 driver are: [ 206.153884][T28502] pcl724 [ 206.154869][T28502] pcl722 [ 206.155869][T28502] pcl731 [ 206.156817][T28502] acl7122 [ 206.157834][T28502] acl7124 [ 206.158866][T28502] pet48dio [ 206.159926][T28502] pcmio48 [ 206.160961][T28502] onyx-mm-dio [ 206.162089][T28502] comedi: valid board names for pcl711 driver are: [ 206.164307][T28502] pcl711 [ 206.165293][T28502] pcl711b [ 206.166270][T28502] acl8112hg [ 206.167361][T28502] acl8112dg [ 206.169127][T28502] comedi: valid board names for amplc_pc263 driver are: [ 206.172195][T28502] pc263 [ 206.173576][T28502] comedi: valid board names for amplc_pc236 driver are: [ 206.176490][T28502] pc36at [ 206.177795][T28502] comedi: valid board names for amplc_dio200 driver are: [ 206.180700][T28502] pc212e [ 206.181958][T28502] pc214e [ 206.183213][T28502] pc215e [ 206.184619][T28502] pc218e [ 206.185759][T28502] pc272e [ 206.186736][T28502] comedi: valid board names for comedi_parport driver are: [ 206.189058][T28502] comedi_parport [ 206.190225][T28502] comedi: valid board names for comedi_test driver are: [ 206.192330][T28502] comedi_test [ 206.193442][T28502] comedi: valid board names for comedi_bond driver are: [ 206.195700][T28502] comedi_bond [ 207.584957][T28657] __nla_validate_parse: 6 callbacks suppressed [ 207.584976][T28657] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.11054'. [ 207.598093][T28657] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 207.779717][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.873112][T28694] netlink: 'syz.0.11070': attribute type 10 has an invalid length. [ 207.914325][T28697] comedi comedi3: adq12b: I/O base address or length out of range [ 207.928789][T28698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11073'. [ 207.956872][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11074'. [ 207.960112][T28701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11074'. [ 208.086276][T28719] tipc: Enabling not permitted [ 208.088796][T28719] tipc: Enabling of bearer rejected, failed to enable media [ 208.135533][T20250] udevd[20250]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 208.280643][T28740] ------------[ cut here ]------------ [ 208.284225][T28740] 1 [ 208.284240][T28740] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#0: syz.1.11093/28740 [ 208.289309][T28740] Modules linked in: [ 208.291620][T28740] CPU: 0 UID: 0 PID: 28740 Comm: syz.1.11093 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.296419][T28740] Tainted: [L]=SOFTLOCKUP [ 208.298274][T28740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.302721][T28740] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 208.305070][T28740] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 0c 5f 1a f8 66 90 e8 05 5f 1a f8 ba 02 00 00 00 48 89 de 31 ff e8 76 6f 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 de 5e 1a [ 208.313203][T28740] RSP: 0018:ffffc90007fcf380 EFLAGS: 00010283 [ 208.315893][T28740] RAX: 0000000000000ddf RBX: ffff888045547180 RCX: ffffc90025d69000 [ 208.319142][T28740] RDX: 0000000000080000 RSI: ffffffff895a9d34 RDI: ffffffff8c1c3500 [ 208.322462][T28740] RBP: ffff888045547180 R08: 0000000000000001 R09: 0000000000000000 [ 208.325941][T28740] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028af0000 [ 208.329324][T28740] R13: ffff888023807080 R14: 0000000000000000 R15: ffff8880455471d8 [ 208.332572][T28740] FS: 00007f4657e576c0(0000) GS:ffff8880d6379000(0000) knlGS:0000000000000000 [ 208.336359][T28740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.339278][T28740] CR2: 00007f465704f0d1 CR3: 00000000609ff000 CR4: 0000000000352ef0 [ 208.342627][T28740] Call Trace: [ 208.344109][T28740] [ 208.345410][T28740] ? __pfx_ip_rt_bug+0x10/0x10 [ 208.347577][T28740] ip_push_pending_frames+0x29e/0x300 [ 208.349898][T28740] icmp_push_reply+0x30e/0x450 [ 208.352035][T28740] __icmp_send+0x11b4/0x2c70 [ 208.353549][T28740] ? __pfx___icmp_send+0x10/0x10 [ 208.355265][T28740] ? __pfx_ip_route_input_slow+0x10/0x10 [ 208.357580][T28740] ? __lock_acquire+0x4a5/0x2630 [ 208.359549][T28740] ? __ip_options_compile+0x604/0x16a0 [ 208.361512][T28740] ? ip_route_input_noref+0x15f/0x2e0 [ 208.363303][T28740] ip_options_compile+0xb6/0x100 [ 208.365015][T28740] ? __pfx_ip_options_compile+0x10/0x10 [ 208.366804][T28740] ? __pfx_ip_rcv_finish+0x10/0x10 [ 208.368487][T28740] ip_rcv_finish_core+0x693/0x2c30 [ 208.370358][T28740] ip_rcv+0x1c0/0x3c0 [ 208.371719][T28740] ? __pfx_ip_rcv+0x10/0x10 [ 208.373212][T28740] __netif_receive_skb_one_core+0x197/0x1e0 [ 208.375188][T28740] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 208.377354][T28740] ? lock_acquire+0x1b1/0x370 [ 208.378934][T28740] __netif_receive_skb+0x1f/0x120 [ 208.380730][T28740] netif_receive_skb+0x13b/0x7f0 [ 208.382336][T28740] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 208.384289][T28740] ? __pfx_netif_receive_skb+0x10/0x10 [ 208.386108][T28740] tun_rx_batched.isra.0+0x3f6/0x750 [ 208.387808][T28740] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 208.389683][T28740] ? rcu_is_watching+0x12/0xc0 [ 208.391257][T28740] ? tun_get_user+0x1cc8/0x3c20 [ 208.392769][T28740] tun_get_user+0x1e31/0x3c20 [ 208.394282][T28740] ? __pfx_tun_get_user+0x10/0x10 [ 208.395907][T28740] ? __file_has_perm+0x336/0x460 [ 208.397495][T28740] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 208.399210][T28740] ? find_held_lock+0x2b/0x80 [ 208.400728][T28740] ? tun_get+0x191/0x370 [ 208.402179][T28740] ? tun_get+0x191/0x370 [ 208.403601][T28740] tun_chr_write_iter+0xdc/0x200 [ 208.405174][T28740] vfs_write+0x6ac/0x1070 [ 208.406697][T28740] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 208.408489][T28740] ? __pfx_vfs_write+0x10/0x10 [ 208.410047][T28740] ? find_held_lock+0x2b/0x80 [ 208.411602][T28740] ksys_write+0x12a/0x250 [ 208.413099][T28740] ? __pfx_ksys_write+0x10/0x10 [ 208.414687][T28740] ? rcu_is_watching+0x12/0xc0 [ 208.416260][T28740] do_syscall_64+0x10b/0xf80 [ 208.417760][T28740] ? clear_bhb_loop+0x40/0x90 [ 208.419313][T28740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.421255][T28740] RIP: 0033:0x7f4656f5d60e [ 208.422742][T28740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.428758][T28740] RSP: 002b:00007f4657e56fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.431374][T28740] RAX: ffffffffffffffda RBX: 00007f4657e576c0 RCX: 00007f4656f5d60e [ 208.433932][T28740] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 208.436400][T28740] RBP: 00007f4657032d69 R08: 0000000000000000 R09: 0000000000000000 [ 208.438824][T28740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.441299][T28740] R13: 00007f4657216038 R14: 00007f4657215fa0 R15: 00007ffedbf406e8 [ 208.443794][T28740] [ 208.444882][T28740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.447162][T28740] CPU: 0 UID: 0 PID: 28740 Comm: syz.1.11093 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.450625][T28740] Tainted: [L]=SOFTLOCKUP [ 208.451998][T28740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.455205][T28740] Call Trace: [ 208.456310][T28740] [ 208.457256][T28740] dump_stack_lvl+0x100/0x190 [ 208.458779][T28740] vpanic+0x552/0x970 [ 208.460081][T28740] ? __pfx_vpanic+0x10/0x10 [ 208.461537][T28740] panic+0xd1/0xe0 [ 208.462744][T28740] ? __pfx_panic+0x10/0x10 [ 208.464202][T28740] check_panic_on_warn.cold+0x19/0x34 [ 208.465849][T28740] ? ip_rt_bug+0x2b/0x150 [ 208.467178][T28740] __warn.cold+0x191/0x328 [ 208.468628][T28740] __report_bug+0x296/0x3d0 [ 208.470083][T28740] ? ip_rt_bug+0x2b/0x150 [ 208.471452][T28740] ? __pfx___report_bug+0x10/0x10 [ 208.473077][T28740] ? ip_rt_bug+0x2b/0x150 [ 208.474464][T28740] report_bug+0xb2/0x220 [ 208.475838][T28740] ? ip_rt_bug+0x2b/0x150 [ 208.477295][T28740] handle_bug+0x16a/0x2a0 [ 208.478674][T28740] exc_invalid_op+0x17/0x50 [ 208.480173][T28740] asm_exc_invalid_op+0x1a/0x20 [ 208.481752][T28740] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 208.483471][T28740] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 0c 5f 1a f8 66 90 e8 05 5f 1a f8 ba 02 00 00 00 48 89 de 31 ff e8 76 6f 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 de 5e 1a [ 208.489423][T28740] RSP: 0018:ffffc90007fcf380 EFLAGS: 00010283 [ 208.491350][T28740] RAX: 0000000000000ddf RBX: ffff888045547180 RCX: ffffc90025d69000 [ 208.493861][T28740] RDX: 0000000000080000 RSI: ffffffff895a9d34 RDI: ffffffff8c1c3500 [ 208.496329][T28740] RBP: ffff888045547180 R08: 0000000000000001 R09: 0000000000000000 [ 208.499004][T28740] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028af0000 [ 208.501950][T28740] R13: ffff888023807080 R14: 0000000000000000 R15: ffff8880455471d8 [ 208.504683][T28740] ? sk_skb_reason_drop+0x114/0x1b0 [ 208.506362][T28740] ? __pfx_ip_rt_bug+0x10/0x10 [ 208.507899][T28740] ip_push_pending_frames+0x29e/0x300 [ 208.509629][T28740] icmp_push_reply+0x30e/0x450 [ 208.511152][T28740] __icmp_send+0x11b4/0x2c70 [ 208.512597][T28740] ? __pfx___icmp_send+0x10/0x10 [ 208.514114][T28740] ? __pfx_ip_route_input_slow+0x10/0x10 [ 208.515874][T28740] ? __lock_acquire+0x4a5/0x2630 [ 208.517428][T28740] ? __ip_options_compile+0x604/0x16a0 [ 208.519152][T28740] ? ip_route_input_noref+0x15f/0x2e0 [ 208.520833][T28740] ip_options_compile+0xb6/0x100 [ 208.522431][T28740] ? __pfx_ip_options_compile+0x10/0x10 [ 208.524141][T28740] ? __pfx_ip_rcv_finish+0x10/0x10 [ 208.525861][T28740] ip_rcv_finish_core+0x693/0x2c30 [ 208.527900][T28740] ip_rcv+0x1c0/0x3c0 [ 208.529286][T28740] ? __pfx_ip_rcv+0x10/0x10 [ 208.530901][T28740] __netif_receive_skb_one_core+0x197/0x1e0 [ 208.533029][T28740] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 208.535191][T28740] ? lock_acquire+0x1b1/0x370 [ 208.536733][T28740] __netif_receive_skb+0x1f/0x120 [ 208.538332][T28740] netif_receive_skb+0x13b/0x7f0 [ 208.540101][T28740] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 208.541982][T28740] ? __pfx_netif_receive_skb+0x10/0x10 [ 208.543734][T28740] tun_rx_batched.isra.0+0x3f6/0x750 [ 208.545588][T28740] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 208.547978][T28740] ? rcu_is_watching+0x12/0xc0 [ 208.549964][T28740] ? tun_get_user+0x1cc8/0x3c20 [ 208.551628][T28740] tun_get_user+0x1e31/0x3c20 [ 208.553160][T28740] ? __pfx_tun_get_user+0x10/0x10 [ 208.554982][T28740] ? __file_has_perm+0x336/0x460 [ 208.556973][T28740] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 208.559160][T28740] ? find_held_lock+0x2b/0x80 [ 208.561074][T28740] ? tun_get+0x191/0x370 [ 208.562604][T28740] ? tun_get+0x191/0x370 [ 208.564034][T28740] tun_chr_write_iter+0xdc/0x200 [ 208.566041][T28740] vfs_write+0x6ac/0x1070 [ 208.567810][T28740] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 208.570061][T28740] ? __pfx_vfs_write+0x10/0x10 [ 208.571580][T28740] ? find_held_lock+0x2b/0x80 [ 208.573250][T28740] ksys_write+0x12a/0x250 [ 208.574778][T28740] ? __pfx_ksys_write+0x10/0x10 [ 208.576540][T28740] ? rcu_is_watching+0x12/0xc0 [ 208.578284][T28740] do_syscall_64+0x10b/0xf80 [ 208.579782][T28740] ? clear_bhb_loop+0x40/0x90 [ 208.581290][T28740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.583149][T28740] RIP: 0033:0x7f4656f5d60e [ 208.584869][T28740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.591548][T28740] RSP: 002b:00007f4657e56fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.594198][T28740] RAX: ffffffffffffffda RBX: 00007f4657e576c0 RCX: 00007f4656f5d60e [ 208.596716][T28740] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 208.599184][T28740] RBP: 00007f4657032d69 R08: 0000000000000000 R09: 0000000000000000 [ 208.601670][T28740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.604203][T28740] R13: 00007f4657216038 R14: 00007f4657215fa0 R15: 00007ffedbf406e8 [ 208.606698][T28740] [ 208.608449][T28740] Kernel Offset: disabled [ 208.609847][T28740] Rebooting in 86400 seconds..